Product Security Incident Response Program Manager (m/f/d)
Full-time
Worldwide
Oct 30, 2026
RemoteMatch analyzes your experience against this role's specific tech stack, timezone overlap, and requirements.
About the Role
As a member of NXP’s Product Security Incident Response Team, you will lead the operational response to reported vulnerabilities affecting NXP hardware and software products. You will own and drive security cases from initial intake through assessment, remediation coordination, customer communication, and responsible disclosure. This position focuses on program leadership, case management, stakeholder coordination, communication, and continuous improvement. You will bring together engineering, product management, quality, legal, communications, customer-facing teams, and external researchers to ensure that security issues progress toward a timely resolution. What you'll do: A snapshot of your key responsibilities and impact. Own the operational lifecycle of product vulnerability cases from intake through closure and disclosure. Establish the response plan, milestones, ownership, dependencies, escalation path, and communication cadence for each assigned case. Coordinate impact assessments and remediation planning across engineering, product management, quality, legal, communications, and customer-facing organizations. Track decisions, evidence, approvals, outstanding actions, and delivery risks. Facilitate vulnerability review meetings and drive actions to completion. Coordinate responsible and coordinated vulnerability disclosure with researchers, customers, partners, and relevant external organizations. Manage CVE reservation and publication workflows in coordination with te